PaulDotCom mailing list archives

password cadence


From: dninja at gmail.com (Robin Wood)
Date: Tue, 19 Jan 2010 15:54:52 +0000

2010/1/19 Chris Blazek <chris.blazek at gmail.com>:
What would happen if the user changed their password?

The system would know that it has changed and go into learning mode,
the tolerance levels could be lowered and the user asked to enter it a
few times once they've changed it so the system gets a rough idea. If
the system adapts and averages each time you enter it then then it
would be more flexible than just learning one pattern at the start and
then purely working off that.

Robin

The program would have to relearn how you type it again. Depending on how
often you change your password, that might be pretty tough to implement I
would think. I would be afraid that would give people a reason not to change
their password as frequently as they should be doing.

A fingerprint scanner might be a better solution for a two factor
authentication.

Just my 2 cent.

Chris



On Tue, Jan 19, 2010 at 5:50 AM, Robin Wood <dninja at gmail.com> wrote:

Has anyone done, or heard about, any research on monitoring the
cadence of someone entering their password and linking it to a login
process?

What I mean by this is that because I know my PC login and I type it
every day I tend to type it in a set way at a set speed, if someone
managed to get hold of the password they wouldn't be able to enter it
in the same way so wouldn't be able to login. It is two factor
authentication based on what you know, the password, and what you have
(?) the muscle memory of how you enter it.

Robin
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



--
http://www.kingbin.net/

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com



Current thread: